215 matches found
CVE-2026-45141
Chamilo LMS is an open-source learning management system. Prior to 2.0.1, the add, deletegradebookfromskill, saveprofile, and deleteprofile actions in public/main/inc/ajax/skill.ajax.php perform database mutations without Security::checktoken validation. An attacker can use cross-site request...
Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-52917)
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...
CVE-2026-107637
pH7Builder pH7 Social Dating CMS before 18.5.0 contains an improper authorization vulnerability in the note module delete action that allows authenticated members to delete other members' note comments and categories. Attackers can submit another member's note ID in the POST id parameter to remov...
CVE-2026-64522
A flaw was found in the Linux kernel's mlx5e network driver. When handling temporary Security Associations SAs for IPsec, the mlx5exfrmaddstate function incorrectly decrements a counter without a corresponding increment. This underflow in the eswitch mode block mechanism can lead to a denial of...
kernel: xfrm: Duplicate SPI Handling
In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...
Android Asset Links Configuration - Detect
The .well-known/assetlinks.json file was found on the target server. This file is used by Android applications to establish verified app-to-web domain associations through the Digital Asset Links protocol. !/usr/bin/env python3 -- coding: utf-8 -- """The .""" from kittysploit import from...
CVE-2026-63911
A flaw was found in the Linux kernel's xfrm: iptfs component. This vulnerability arises from incorrect handling of runtime data when cloning Security Associations SAs. If a state migration fails, the cloned state can improperly share memory with the original, leading to use-after-free and...
CVE-2026-63911 xfrm: iptfs: reset runtime state when cloning SAs
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: reset runtime state when cloning SAs iptfsclonestate clones the IPTFS mode data with kmemdup. This copies runtime objects which must not be shared with the original SA, including the embedded skbuffhead, hrtimers,...
CVE-2026-63911
CVE-2026-63911 (Linux kernel xfrm/iptfs) : The vulnerability arises in how IPTFS mode data is cloned during SA cloning. iptfs_clone_state() duplicates runtime objects (e.g., sk_buff_head, hrtimers, spinlocks, reassembly/reorder state) via kmemdup, which must not be shared with the original SA. If...
GHSA-VP55-5C2V-3597 Duplicate Advisory: PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xxgv-vgvj-qvxh. This link is maintained to preserve external references. Original Description PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace membe...
CVE-2026-61440: Missing Authorization
PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member privileges can exploit PATCH and POST/DELETE endpoints to...
sctp: diag: reject stale associations in dump_one path
...
SUSE CVE-2026-52917
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...
CVE-2026-52917
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...
UBUNTU-CVE-2026-52917
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...
CVE-2026-52917
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...
CVE-2026-52917 sctp: diag: reject stale associations in dump_one path
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...
CVE-2026-52917
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...
CVE-2026-52917 sctp: diag: reject stale associations in dump_one path
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...
EUVD-2026-38720
In the Linux kernel, the following vulnerability has been resolved: sctp: diag: reject stale associations in dumpone path The SCTP exact sockdiag lookup can hold a transport reference, block on locksocksk, and then resume after sctpassociationfree has marked the association dead and freed its bin...